I feel that people who can write assembler programs are really strong. However, if you don't understand machine code, you probably won't understand it. I'm currently researching the decompiler system. This is all my own understanding. Please take care of me~
Super string reference
address Disassembly Text string
00401092 push 13222453.00407AA8 Start to execute the program, a total of 6 steps, the first step is currently executed...
004010BB push 13222453.00407AA0 Error
004010C0 push 13222453.00407A90 Please enter the resource ID
, 10422edi45.5 mov D8 GET /csdn_action2.php?act=reg HTTP/1.1\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET4.0E; . NET4.0C)\r\nHost: www.itziy.com\r\n\r\n
0040112D push 13222453.004079C8 www.itziy.com
00401140 push 13222453.00407AA0 Error
00401145 push 13222453.00407984 It may be a program error after you send the download request There is a problem with the network or the server is busy!
0040116A push 13222453.00407978 Location:
0040117F push 13222453.00407AA0 Error
00401184 push 13222453.0040793C Your network status is unstable, the download request failed, please try again later! error: 1
004011A2 push 13222453.0040791C The first step of the program is completed, a total of 6 steps...
刘子豪 4-25 11:37
00401537 mov edi,13222453.004075DC GET /ajax/accounthandler.ashx?t=act&un=
00401591 mov edi,13222453.004075D0 HTTP/1.1\r\n
004015C0 mov edi,13222453.0040783C x-requested-with: XMLHttpRequest\r\n
004015F2 mov edi,13222453.0040759C Referer: http://passport.csdn.net/account/active\r\n
00401621 mov edi,13222453.004077D0 Content-Type: application/x-www-form-urlencoded\r\n
0040164D mov edi,13222453.00407734 User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET4.0E; .NET4.0C)\r\n
0040167C mov edi,13222453.00407718 Host: passport.csdn.net\r\n
MOV EDI 004016AB, 13,222,453.00407590 cookies: UN =
00,401,708 MOV EDI, 13,222,453.00407564; pp_vc = ZUOc76Ah2sA9PwJB 2bXwoug% 3D% 3D% \ R & lt \ R & lt \ n-\ n-
00.40174 million Push 13222453.004076D0 passport.csdn.net
00,401,753 Push 13222453.00407AA0 error
00401758 push 13222453.00407524 transmission An error occurs in the program after the download request, the most likely cause is that your network is unstable and other problems!
MOV EDI 004017A2, the GET 13222453.004074FC /csdn_action2.php?act=chk&e_addr=
00,401,805 MOV EDI, 13222453.004074F0 & e_cookie =
0040185E MOV EDI, 13,222,453.00407458 the HTTP / 1.1 \ R & lt \-nUser - Agent: the Mozilla / 4.0 (compatible; MSIE 8.0; the Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET4.0E; .NET4.0C)\r\nHost: www.itziy.com\r\n\r\n
0040189D push 13222453.004079C8
004018B0 push 13222453.00407AA0 Error
004018B5 push 13222453.00407984 There is an error in the program after sending the download request, maybe there is a problem with your network or the server is busy!
004018DA push 13222453.00407978 Location:
004018EF push 13222453.00407AA0 Error
004018F4 push 13222453.0040741C Your network status is unstable, the download request failed, please try again later! error: 2
00401912 push 13222453.004073FC The program executes the third step, a total of 6 steps...
00401926 push 13222453.00407918
0040198A mov edi,13222453.004073F4 GET
004019EE mov edi\rn\rnD0 HTTP/.
00401A1D mov edi,13222453.00407734 User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET4.0E; .NET4.0C)\r\n
00401A4C mov edi ,13222453.004073D8 Host: passport.csdn.net\r\n\r\n
00401A84 push 13222453.004076D0 passport.csdn.net
00401A99 push 13222453.004073B8 The program executes 4 steps and completes 6 steps...
00401AD5 mov edi,130 /ajax/accounthandler.ashx?t=log&u=
00401B2F mov edi,13222453.0040734C &p=wrr717&c=&remember=0&f=http%3A//passport.csdn.net/account/login
00401B5E mov edi,13222453.004075D0 HTTP/1.1\ \n
00401B90 mov edi,13222453.0040783C x-requested-with: XMLHttpRequest\r\n
00401BBF mov edi,13222453.00407304 Referer: http://passport.csdn.net/account/loginbox?callback=logined\r\n
00401BEB mov edi,13222453.004077D0 Content-Type: application/x-www-form-urlencoded\r\n
00401C1A mov edi,13222453.00407734 User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET4.0E; .NET4.0C)\r\n
00401C49 mov edi,13222453.004073D8 Host: passport.csdn.net\r\n\r\n
00401C81 push 13222453.004076D0 passport.csdn.net
00401CA7 mov edi,13222453.00407590 Cookie: UN=
Mov EDI 00401D08, 13222453.004072F8; UserName =
00401D65 mov EDI, 13222453.004072EC; UserInfo =
00401D92 the Push 13222453.004072D4 the Set-Cookie: UserInfo =
00401DA9 the Push 13222453.00407AA0 error
00401DAE push 13222453.004072A4 Sorry, the server is busy, please try again later error:! Active NO
00401DCC Push 13,222,453.00407284 program execution operation is completed in step 5 of 6 ...
00401DE0 Push 13,222,453.00407280 =
00401E83 MOV EDI, 13,222,453.00407264 download.csdn.net/source/
00401EF5 Push 13,222,453.00407978 the Location:
00401F08 error Push 13222453.00407AA0
00401F0D push 13222453.00407224 Your network status is unstable, the download request failed to send, please try again later! error: 2_2
00401F2B the Push 13,222,453.00407918
00401F72 mov EDI, 13,222,453.00407208 download.csdn.net/download
00401FDA the Push 13222453.004071E8 /index.php/source/do_download
00401FFC the Push 13222453.00407AA0 error
00402001 push 13222453.004071AC your network status is unstable, the download request failed ,Please try again later! error:. 3
0040206C MOV EDI, 13222453.004071A4 the POST
004020CD MOV EDI, 13222453.004075D0 the HTTP / 1.1 \ R & lt \ n-
004020FC MOV EDI, 13,222,453.00407178 the Referer: http://download.csdn.net/download/
00,402,126 Push 13222453.0040716C do_download
004021BA mov edi,13222453.00407168 /
00402214 mov edi,13222453.00407164 \r\n
00402243 mov edi,13222453.00407734 User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET4.0E; .NET4.0C)\r\n
00402275 mov edi,13222453.004077D0 Content-Type: application/x-www-form-urlencoded\r\n
004022A4 mov edi,13222453.00407148 Host: download.csdn.net\r\n
004022D0 mov edi,13222453.00407134 Content-Length: 5\r\n
00402330 mov edi,13222453.0040712C \r\n\r\n
0040235F mov edi,13222453.00407124 ds=dx
00402397 push 13222453.00407110 download.csdn.net
004023AA push 13222453.00407AA0 error
004023AF push 13222453.004070F0 program error after sending download request!
The Push 13,222,453.00407978 the Location 004023D4:
004023E7 the Push 13222453.00407AA0 error
004023EC push 13222453.004070C0 Sorry, the server is busy, had a moment retry error:! NO the cookie
004023F3 the Push 13,222,453.00407918
00,402,499 the Push 13,222,453.00407098 program step 6 is complete, the program execution is completed.
004024BB the Push 13,222,453.00407090 open
004024CA push 13222453.00407080 Get the address successfully
004024CF push 13222453.00407048 The download address has been copied to the clipboard, please open the browser and paste it to download!
004024E6 push 13222453.00407044 1
004024F3 push 13222453.00407030 program in its default state ...
0040279E mov EDI, 13222453.004073F4 GET
00,402,807 mov EDI, 13222453.004075D0 HTTP / 1.1 \ r \ the n-
0040283B mov EDI, 13222453.00407B04 HOST:
00,402,898 mov EDI, 13222453.00407AEC \ r \ nConnection: use Close \ R & lt \ n-\ R & lt \ n-
00.40291 million 13222453.00407AD8 Push Source / do_download /
0040292D Push 13222453.00407AD0 [CSDN]
00402A8F Push EBP (the Initial Selection the CPU)
004035D9 Push 13222453.0040612C __MSVCRT_HEAP_SELECT
00,403,618 Push 13,222,453.00406114 __GLOBAL_HEAP_SELECTED
004039B6 push 13222453.00406418 <program name unknown>
004039F8 push 13222453.00406414 ...
00403A0C push 13222453.004063F8 Runtime Error!\n\nProgram:
00403A2A push 13222453.004063F4 \n\n
00403A52 push 13222453.004063CC Microsoft Visual C++ Runtime Library
00404F46 mov esi,13222453.00407D50 P}@
00404F46 mov esi,13222453.00407D50 P}@
00404F46 mov esi,13222453.00407D50 P}@
00404FA2 mov eax,13222453.00407D50 P}@
00404FA2 mov eax,13222453.00407D50 P}@
00404FA2 mov eax,13222453.00407D50 P}@
00405199 mov edx,13222453.00407D50 P}@
00405199 mov edx,13222453.00407D50 P}@
00405199 mov edx,13222453.00407D50 P}@
0040530C mov eax,13222453.00407D50 P}@
0040530C mov eax,13222453.00407D50 P}@
0040530C mov eax,13222453.00407D50 P}@
0040556A push 13222453.00406460 user32.dll
00405581 push 13222453.00406454 MessageBoxA
00405592 push 13222453.00406444 GetActiveWindow
0040559A push 13222453.00406430 GetLastActivePopup